16-10
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
—
Release 8.1
78-15486-01
Chapter 16 Configuring Port Security
Monitoring Port Security
Restricting Traffic for a Host MAC Address
To restrict incoming or outgoing traffic for a specific MAC address, perform this task in privileged mode:
This example shows how to create a filter for a specific MAC address:
Console> (enable) set cam static filter 00-02-03-04-05-06 1
Filter entry added to CAM table.
Console> (enable)
This example shows how to clear the filter:
Console> (enable) clear cam 00-02-03-04-05-06 1
CAM entry cleared.
Console> (enable)
This example shows how to display the static CAM entries:
Console> show cam static
VLAN Dest MAC/Route Des [CoS] Destination Ports or VCs / [Protocol Type]
---- ------------------ ----- -------------------------------------------
3 04-04-05-06-07-08 * FILTER
Console> (enable)
Monitoring Port Security
You can view the following port security information:
•
List of secure MAC addresses for a port
•
Maximum number of secure addresses that are allowed on a port
•
Total number of secure MAC addresses
•
Age and shutdown timeout
•
Shutdown and security mode
•
Statistics data related to port security
Task
Command
Step 1
Restrict traffic that is destined to or originating
from a specific MAC address.
set cam {static | permanent} filter unicast_mac
vlan
Step 2
Clear the filter.
clear cam {static | permanent}
clear cam mac_address vlan
Step 3
Verify the configuration.
show cam mac_address vlan
show cam {static | permanent}
